Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/uBNWeS44o1lTrGj5AmS9wl7ebAU.roa
File: uBNWeS44o1lTrGj5AmS9wl7ebAU.roa (raw, json)
Hash identifier: TygPlsD5KF22ALl/3RtX5KMd9PThvZOdcOJ8r9jllnU=
Subject key identifier: B8:13:56:79:2E:38:A3:59:53:AC:68:F9:02:64:BD:C2:5E:DE:6C:05
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0185734CB2690ADF95663E6AB86B597ABE57
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/uBNWeS44o1lTrGj5AmS9wl7ebAU.roa
Signing time: Mon 02 Jan 2023 16:24:44 +0000
ROA not before: Mon 02 Jan 2023 16:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31141
IP address blocks: 62.192.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:b2:69:0a:df:95:66:3e:6a:b8:6b:59:7a:be:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 16:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b81356792e38a35953ac68f90264bdc25ede6c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:77:17:7c:19:eb:12:53:05:3e:20:b3:e1:f1:
26:19:95:ab:dd:39:82:d6:a6:7f:f4:cb:97:f3:62:
80:75:b2:bb:5f:e1:63:20:7f:f7:a9:20:26:8e:de:
b2:07:eb:80:4a:bf:51:66:48:ae:38:5e:04:9b:c4:
33:ba:31:58:5b:ad:b2:2c:70:60:a8:ea:cb:41:fd:
a5:17:50:8c:d4:ae:af:3b:7f:a0:6e:e0:88:1a:1f:
a4:1e:4e:1d:97:4b:c8:70:1b:c3:46:da:91:73:2a:
f3:1d:fc:ff:c5:10:88:a1:e0:9a:4b:9e:65:19:46:
0b:05:b0:ae:4a:a6:df:32:13:3d:de:e5:11:ac:9f:
77:83:cf:7d:9e:a4:f4:bd:7c:1a:3d:9a:3c:be:cb:
87:b1:d6:45:0a:cf:af:f3:49:ac:3c:a8:00:59:68:
c5:42:d9:dd:c0:df:92:bf:9f:3f:6c:d9:e4:4c:47:
b0:25:bd:1e:99:b0:36:a3:b5:bf:f2:49:83:03:bf:
2b:d9:5a:32:35:6a:54:f1:df:99:f9:f2:ac:94:99:
94:bd:46:e5:34:ad:82:a0:a0:55:37:22:fc:f8:8b:
b8:46:6f:33:67:77:80:23:2b:49:08:9d:8d:4a:91:
47:99:49:17:a5:24:99:23:1f:2c:35:cd:f8:27:f3:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:13:56:79:2E:38:A3:59:53:AC:68:F9:02:64:BD:C2:5E:DE:6C:05
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/uBNWeS44o1lTrGj5AmS9wl7ebAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.17.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a8:b4:a7:48:ee:9d:f5:3c:9d:0f:b8:4d:cc:59:6f:e3:a9:
1f:3b:16:77:5e:1b:64:38:ff:ea:37:8e:77:7e:0a:1a:63:3a:
31:48:f8:d4:c4:df:17:d4:59:e4:23:fb:98:a7:61:cd:08:33:
c3:e8:f7:3c:99:f1:b5:d4:f6:63:e3:ab:a0:ef:fa:5e:57:a3:
49:1b:6e:43:96:97:3c:7d:07:8f:ed:71:3e:91:8b:5e:70:1c:
76:e4:2f:66:2b:41:24:09:83:58:be:91:50:9f:3f:5c:bd:3c:
04:bc:47:b4:5a:3d:f3:63:7d:62:ea:9e:a8:eb:8d:27:26:ea:
de:a9:5b:2b:28:c3:72:b3:f7:71:67:93:ed:7d:39:67:59:1a:
e0:ad:17:e9:03:c9:4c:f5:6f:eb:48:fa:ee:ce:83:5e:21:63:
4c:87:5c:a8:91:c2:47:e8:7c:ca:9f:dd:4d:96:c4:0d:5d:4b:
bb:74:8b:1d:41:2b:bb:6c:0c:ba:41:c2:5e:d7:bc:00:fe:a6:
72:c2:45:23:5a:9b:b0:9c:51:a5:1b:1d:3f:8b:00:5b:33:c5:
0c:95:9e:84:13:80:ad:52:9e:fe:07:ed:87:94:4b:96:b9:6a:
c8:9e:98:7c:93:e4:f2:a7:e8:74:2f:71:34:a8:28:0a:a6:d2:
f9:7f:5d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:30 2024 by rpki-client on console-fra.rpki-client.org